mcp-andromeda

The 'python_inline' tool type allows arbitrary Python code execution directly from the YAML configuration, posing a high risk if configuration sources are untrusted. Crucially, the built-in 'database' template generates code highly vulnerable to SQL injection due to direct string concatenation in SQL queries without proper parameterization. HTTP tool configurations also perform direct environment variable substitution into URLs and headers, which could potentially introduce risks if environment variables are not sanitized. These issues mean the builder can generate inherently insecure server code.